[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #3882 [EFF-HTTPS Everywhere]: HTTPS Everywhere 1.0 causing crashes on multiple sites
#3882: HTTPS Everywhere 1.0 causing crashes on multiple sites
-------------------------------------+--------------------------------------
Reporter: jorgev | Owner: pde
Type: defect | Status: closed
Priority: critical | Milestone:
Component: EFF-HTTPS Everywhere | Version:
Resolution: fixed | Keywords:
Parent: | Points:
Actualpoints: |
-------------------------------------+--------------------------------------
Comment(by vic):
Replying to [comment:10 pde]:
> Replying to [comment:7 vic]:
> > Why do you need to disable the nsIContentPolicy::shouldLoad / forceURI
path?
> >
>
> Because the Firefox patch isn't in Firefox 4-7, and we'd prefer not to
crash those browsers?
The removal was in the main branch of HTTPS Everywhere.
Right now Firefox 4-6 has no security updates.
My suggestion is to keep the nsIContentPolicy::shouldLoad / forceURI path
in HTTPS Everywhere v2.0.xDev and release version 2 on the same day that
Firefox 8 ships.
>
> >
> > Please restore the nsIContentPolicy::shouldLoad / forceURI path in
stable version.
>
> Despite Giorgio's concerns, we haven't yet found any cases in which
disabling nsIContentyPolicy caused an insecure HTTP load. If we find any,
we'll try to turn it back on just for those cases.
Really would appreciate if you left it on for Everything, just in case.
I mean come to think of it, the patch released @
https://bugzilla.mozilla.org/show_bug.cgi?id=677643 for Firefox 8+ is now
useless? The patch was because we were using the
nsIContentPolicy::shouldLoad / forceURI path right?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3882#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs